This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32322d3232203d3e203532333238.roa
File:                     34352e3232372e3232342e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          YjP8PF4kc7TPBCBgJ5j4zoKnh7UWgSzSzNI9opgg7BY=
Subject key identifier:   A6:43:47:A3:15:F9:D9:46:BA:70:D8:01:87:F3:3C:15:91:48:FF:1E
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       602D1E167A220D80A2E9CF840B422C68895CBD
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:05:38 +0000
ROA not before:           Tue 06 Jan 2026 19:00:38 +0000
ROA not after:            Tue 05 Jan 2027 19:05:38 +0000
asID:                     52328
IP address blocks:        45.227.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2d:1e:16:7a:22:0d:80:a2:e9:cf:84:0b:42:2c:68:89:5c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Jan  6 19:00:38 2026 GMT
            Not After : Jan  5 19:05:38 2027 GMT
        Subject: CN=A64347A315F9D946BA70D80187F33C159148FF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:66:c2:49:d0:da:46:3a:20:0f:e9:3b:fe:
                    74:a2:bf:f7:18:02:fc:ad:fd:99:70:c8:7e:64:8a:
                    04:3a:ce:da:3a:24:59:10:e0:07:31:27:bd:b2:1f:
                    d7:02:9f:d7:9d:ff:12:42:27:0b:85:80:48:cc:5c:
                    61:98:34:22:38:3d:4e:9e:da:c3:99:b4:a6:09:80:
                    21:dc:89:0a:3b:24:4b:e2:17:63:cb:c7:30:b9:13:
                    05:94:b3:e7:57:70:b5:0a:1e:56:64:68:ee:c5:95:
                    39:e3:62:28:92:42:0f:f9:45:70:6b:e0:91:7d:76:
                    48:fa:03:55:6c:1a:79:22:cd:f7:2d:19:c7:17:99:
                    26:49:64:ae:18:42:97:8c:12:69:b6:fb:27:de:79:
                    6a:a2:84:83:c4:79:f0:6a:f2:09:fa:e6:f7:3c:f8:
                    14:7c:40:00:b8:df:19:f4:57:a6:ec:78:f0:2e:8c:
                    17:1a:2b:50:a2:b3:ec:df:af:5a:02:06:d8:d8:ee:
                    6a:29:8d:8f:5c:1a:25:b5:65:6e:b3:68:17:17:ae:
                    9b:39:0f:06:72:af:8a:f5:f1:2a:1c:89:1e:86:79:
                    f9:56:8e:97:91:01:3b:f3:f8:ff:0b:88:11:e7:50:
                    08:f2:16:f5:76:ca:96:80:c1:1c:53:e1:1c:05:f9:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:43:47:A3:15:F9:D9:46:BA:70:D8:01:87:F3:3C:15:91:48:FF:1E
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:40:ca:3b:05:8f:d6:f7:42:85:64:e5:ff:e7:11:ad:5e:96:
         0b:f7:e9:e8:4c:c4:16:64:fc:59:8a:60:a3:30:d1:7b:73:c4:
         c8:8c:6d:a3:59:4d:56:83:5b:4f:d8:8d:60:3b:f6:52:b2:ff:
         9a:e5:8e:b8:62:b0:cf:21:2b:98:5f:71:f5:87:05:53:5a:4b:
         b1:75:df:1d:8d:96:4f:7a:5b:74:04:54:d4:6a:1f:06:b7:55:
         5a:15:65:ff:ea:c0:f0:d9:a6:c2:41:74:fc:86:81:ab:fe:c2:
         18:2d:37:be:c9:98:f4:50:25:8d:f9:3d:8e:7a:b4:d2:ba:06:
         56:bb:97:b1:c8:7a:2a:3e:34:ea:54:d0:05:9b:40:8c:2e:0c:
         f8:38:71:df:0e:59:33:da:f4:59:9b:11:88:28:23:7e:06:7f:
         5a:15:c7:6e:a9:db:79:09:4a:36:ce:66:3a:b1:7e:eb:8f:31:
         87:0b:be:65:96:cf:74:46:28:81:38:71:7d:ee:cd:c9:0e:16:
         f8:5e:84:44:f8:1d:bf:af:ef:92:47:8a:31:ef:75:3a:8d:f1:
         64:5d:f4:7f:42:98:d6:aa:55:b6:06:b8:9c:03:29:89:4f:e6:
         63:22:74:cc:89:4a:34:2a:5e:52:05:e2:18:30:f3:74:ce:b8:
         09:03:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:01:36 2026 by rpki-client